Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: +np1tJE2tXwnWWhqf82nCi08Wp6Avh0pz/pyVuXqfA8=
Subject key identifier: 2A:11:7E:CA:2B:1F:4C:23:FE:C1:06:30:B5:A1:75:C7:2C:19:85:51
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 0199FDD8BA75B29C86ED110E6F1909C243FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 0171
Signing time: Sun 19 Oct 2025 19:01:03 +0000
Manifest this update: Sun 19 Oct 2025 19:01:03 +0000
Manifest next update: Mon 20 Oct 2025 19:01:03 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: p2caonhGaKkb+PotgvxbQP1RhhLcnrwecryFP9NA9aw=)
2: iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa (hash: TADQbHhC3NVuwnA1AHCcNT5GSSVPXnhWpWfVu/iqF94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ba:75:b2:9c:86:ed:11:0e:6f:19:09:c2:43:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Oct 19 19:01:03 2025 GMT
Not After : Oct 20 19:01:03 2025 GMT
Subject: CN=2a117eca2b1f4c23fec10630b5a175c72c198551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:e1:f9:53:03:99:3d:7a:c7:3d:50:5c:42:
57:68:fd:8e:f6:4d:4c:6f:68:37:86:f0:d1:62:07:
07:5b:e6:ae:91:a1:9d:b8:73:42:08:85:5f:0e:06:
09:21:92:6a:d1:e7:20:78:c1:63:05:02:af:4b:fe:
47:5e:db:52:55:2e:03:eb:e7:14:32:41:7b:df:d6:
81:80:f6:d3:fe:b4:db:6c:42:8e:12:b4:2e:e1:33:
ef:30:87:13:24:d3:87:7e:35:40:a8:c2:f7:4f:05:
7b:80:43:c9:36:31:5e:65:1e:9d:2b:60:c3:6d:0d:
77:a5:80:b8:d7:61:a7:3a:de:78:af:3c:bd:b0:89:
1b:56:68:24:c4:31:d9:aa:77:90:9f:2d:a0:0d:08:
c2:f4:39:a6:2a:f4:8f:65:82:50:34:e0:24:ec:1b:
7e:eb:b5:97:80:67:12:a7:c0:ea:d9:1d:c8:62:aa:
1a:ce:78:24:f8:36:b2:25:79:13:5a:d7:cf:a5:51:
72:37:95:dc:d6:da:7c:f9:a8:c4:9e:15:db:03:84:
6d:cd:c7:4c:5f:7b:e1:c0:d3:3a:f8:c2:8b:5c:15:
e4:01:08:e4:60:09:e4:92:61:06:e4:74:27:d0:61:
b1:74:9e:3c:57:70:5c:f3:e9:b6:89:fc:01:8a:cb:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:11:7E:CA:2B:1F:4C:23:FE:C1:06:30:B5:A1:75:C7:2C:19:85:51
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:f3:cf:68:29:66:1b:9e:f9:09:06:9e:29:10:f2:ff:13:
1b:51:a5:bc:c2:19:66:41:dc:23:09:66:50:d5:e7:58:55:06:
07:8e:b9:8b:e1:b5:3c:77:53:27:15:11:09:17:42:7a:28:0f:
0b:d4:98:7b:a3:ff:a7:cd:23:f5:c7:4c:9f:99:c0:ab:fd:02:
11:2b:42:51:1a:67:ed:bf:a1:c9:25:23:62:36:a1:75:5d:21:
46:34:ca:a5:77:1b:7f:f8:2f:d4:f4:05:8d:21:73:d3:da:9c:
c2:cd:80:14:56:45:77:46:af:c8:38:da:cf:ff:3d:e9:cc:ce:
c0:d0:a3:33:93:f1:f1:df:52:57:cc:58:fa:30:1b:bb:aa:81:
1f:68:a1:fa:2f:15:bc:c4:88:63:e5:6d:cc:6b:84:f9:2d:0c:
c5:bb:2a:49:3d:27:b9:b3:1b:d8:1e:08:c9:8d:e6:8d:90:cb:
4d:c5:dd:17:42:ed:f9:c5:92:1a:24:f2:02:4a:8e:40:12:34:
f7:61:cc:17:de:26:9e:7e:0f:2d:44:89:8c:be:61:42:9b:a1:
a5:2f:96:02:1a:aa:77:4c:5d:ed:47:9d:a7:07:ea:45:26:e2:
fb:f7:0f:f1:37:17:ce:df:17:8a:0f:8b:bc:d1:bb:6e:31:33:
0c:de:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:50 2025 by rpki-client